How will patient information be secured?
The requirements recommend a data classification system that will allow only those stakeholders with appropriate authorization to see personal information. The solution is designed to use role-based access control so that only authenticated users with authorized roles will be able to view these data.